CVE-2022-2460 in WPDating Plugin

Sumário

de MITRE • 08/08/2022

The WPDating WordPress plugin through 7.1.9 does not properly escape user input before concatenating it to certain SQL queries, leading to multiple SQL injection vulnerabilities.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 18/07/2022
• Divulgação: 08/08/2022
• Moderação: aceite
• Entrada: VDB-205849
• CPE: pronto
• CWE: CWE-89 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.00908
• KEV: não
• Atividades: muito baixo
• Sector: Hostingprovider

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-2460
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-2460
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-2460/